vLLM OpenAI-Compatible API - Unauthenticated Exposure Detection

Detects a vLLM inference server exposing its OpenAI-compatible API without authentication. The /v1/models endpoint returns the list of served models and is reachable by any unauthenticated client, allowing model enumeration and unauthorized inference resource abuse / cost and information exposure...